EUVD-2018-1927

Malware in sbrugna...

Medis Cross-Site Scripting Vulnerability

Medis is a web-based Redis database management application for the Mac platform. A cross-site scripting vulnerability exists in the key parameter of the new key creation page in Medis 0.6.1 and prior versions. A remote attacker can exploit this vulnerability to execute code...

CVE-2018-1000536

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

CVE-2018-1000536

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

Cross site scripting

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

CVE-2018-1000536

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

CVE-2018-1000536

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...

CVE-2018-1000536

Medis (version 0.6.1 and earlier) contains a cross-site scripting vulnerability that can evolve into code execution due to an enabled nodeIntegration setting in the renderer process. The flaw is triggered via the Key name parameter on new key creation and can enable unauthorized code execution on...

PT-2018-9432

Name of the Vulnerable Software and Affected Versions Medis versions 0.6.1 and earlier Description The issue allows for unauthorized code execution on the victim's machine, within the rights of the running application, due to a XSS vulnerability evolving into code execution. This is caused by...

CVE-2018-1000536: Improper Neutralization of Input During Web Page Generation

Medis version 0.6.1 and earlier contains a XSS vulnerability evolving into code execution due to enabled nodeIntegration for the renderer process vulnerability in Key name parameter on new key creation that can result in Unauthorized code execution in the victim's machine, within the rights of th...